MalwareGovernmentHealthcareGovernmentRansomwareData ExfiltratedData EncryptedSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

Fairbanks North Star Borough

bd_c84517e141a6a784 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 19, 2018

To disclose

—

Affected

4state residents only

Linked

3 filings

Confidence

66%

Full breach record for Fairbanks North Star Borough →

Fairbanks North Star Borough notified the NH Attorney General of a ransomware attack on its former EMS billing vendor, GHAP. The incident, occurring April 14, 2018, compromised personal data (SSNs, DOB, medical codes, credit card info) of 4 NH residents. Notifications were sent July 19, 2018, offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Apr 14, 2018

Begins

Jul 19, 2018

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

HHS OCRbd_b3cd0067d408c1b82018-07-19Verified
Montana State AGbd_ce7bd73395f1fd032018-07-20 · +1dVerified

Name: Fairbanks North Star Borough
norm: fairbanks north star borough

Name: Fairbanks North Star Borough
norm: fairbanks north star borough
Industry: GovernmentllmHealthcarellm

Discovered: —
Breach occurred: Apr 14, 2018
Materiality determined: —
Notification sent: Jul 19, 2018
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified the Attorney General of the State of New Hampshire

During the incident: Retained a third-party IT and forensics firm to investigate the incident
Notified law enforcement of the incident
Notified the three major credit agencies (Equifax, Experian, and TransUnion)
Replaced the affected computer hardware
Installed updated computer software on its systems
Re-evaluating the security of its computer system
Will provide updated training to its personnel
Offering one year of complimentary credit monitoring and identity theft protection services through Experian
Established a confidential telephone inquiry line
Changes made: Working with its technology service provider to mitigate any further damage
Increasing the security of its system to provide protection against future cyber-attacks
Re-evaluating the security of its computer system
Will provide updated training to its personnel
Will work with the Borough’s current ambulance billing provider to ensure that it has adequate administrative, technical and physical safeguards to protect personal information against similar future threats
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

HHS OCRJul 19 · first

New Hampshire State AGJul 19 · first · this page

Montana State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/fairbanks-20180719.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 19, 2018
Raw hash: 85a67a218b97bda2239aa73dc4cc9b69c8c35a323e7acbeb43afd948a256af48

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityFairbanks North Star Borough

Victim entityFairbanks North Star Borough

IncidentRansomware

Stated responseRetained a third-party IT and forensics firm to investigate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov